before oauth